Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GrShAb8U5LEBmujbW6cVc9Z78Os.roa
File: GrShAb8U5LEBmujbW6cVc9Z78Os.roa (raw, json)
Hash identifier: v3W2+0ytv2KfpGahS2CewH2R8TEEfyQ/F0OUQCfbpyw=
Subject key identifier: 1A:B4:A1:01:BF:14:E4:B1:01:9A:E8:DB:5B:A7:15:73:D6:7B:F0:EB
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019D1FADD5611E7D1B8A18D89F5B33EDAC2F
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GrShAb8U5LEBmujbW6cVc9Z78Os.roa
Signing time: Tue 24 Mar 2026 11:49:39 +0000
ROA not before: Tue 24 Mar 2026 11:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 81.18.48.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
178.219.6.0/24 maxlen: 24
178.253.229.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.198.0/24 maxlen: 24
212.69.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:ad:d5:61:1e:7d:1b:8a:18:d8:9f:5b:33:ed:ac:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 24 11:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ab4a101bf14e4b1019ae8db5ba71573d67bf0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3d:19:20:90:56:1f:b6:4f:59:9b:81:17:aa:
91:37:76:82:32:08:18:51:a0:2d:fd:8a:6e:8c:16:
3e:2c:7f:c2:c9:ab:0f:3f:05:09:a4:f6:9e:4b:1a:
76:65:0d:8b:d7:54:7a:61:50:67:3e:f2:58:94:e2:
67:6b:72:89:14:80:e1:7b:4e:8e:ed:f8:e3:3f:d4:
2d:8d:97:fc:7d:52:96:8f:ae:c6:0d:e4:45:1f:08:
6c:fc:c5:d8:8b:5a:71:a6:2b:ba:2d:a0:bb:c5:f9:
bb:9c:27:4d:87:96:21:b8:09:c6:6b:4a:2a:85:0f:
e9:b3:a4:ce:eb:d6:de:33:32:6f:73:e2:7e:f6:cb:
61:b3:46:a4:a8:60:d5:32:9b:39:67:45:92:f1:31:
78:4a:a9:51:22:90:20:91:83:23:e6:2f:40:a2:b3:
66:31:89:c4:a8:74:71:b8:af:c1:0c:b8:91:12:dd:
39:e5:78:5c:06:8e:57:21:97:69:f6:8a:9b:f5:b8:
66:d5:f2:0e:06:47:70:c1:fd:a0:d6:28:7f:ea:a7:
b8:fa:c9:27:93:03:79:a3:f1:a0:06:04:25:0e:9e:
d2:c2:d7:6d:34:56:92:d6:5c:f9:7c:57:f6:c9:0d:
9f:d9:2c:1d:00:ce:8b:89:0b:3d:af:f1:80:3a:ab:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:A1:01:BF:14:E4:B1:01:9A:E8:DB:5B:A7:15:73:D6:7B:F0:EB
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/GrShAb8U5LEBmujbW6cVc9Z78Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.18.48.0/24
109.121.45.0/24
109.121.47.0/24
178.219.6.0/24
178.253.229.0/24
185.47.91.0/24
188.255.198.0/24
212.69.8.0/24
Signature Algorithm: sha256WithRSAEncryption
73:04:0b:e7:85:60:a7:31:9f:79:e4:7a:1e:bd:7b:1e:84:8e:
21:41:60:02:9c:10:68:92:e8:17:1c:32:c4:65:03:0c:99:57:
20:a9:37:e2:2a:63:1a:58:2a:80:e4:8a:da:07:6a:2d:00:bf:
a7:c7:68:64:06:b2:f4:30:6a:68:33:75:f8:f4:5f:3d:d4:35:
18:1b:0b:ef:e5:bd:07:19:e5:82:a2:5d:04:5a:5b:31:56:4d:
bf:f8:d7:ff:83:8d:0c:c5:93:00:b0:90:e1:26:38:bc:b2:09:
ff:32:21:e0:d6:d7:96:bb:06:28:42:f3:b3:5a:75:ff:9c:bf:
55:ea:35:0b:6a:97:78:64:3a:a9:c5:aa:5c:17:2f:f0:86:b6:
16:a8:1c:fb:74:fc:ee:9a:2c:ed:e2:c1:eb:66:ad:45:e3:b4:
03:90:4b:9d:0e:0a:84:4f:a8:9a:8c:a3:9f:5d:d8:14:e7:27:
84:18:dc:01:8e:2b:60:81:e1:dd:e0:29:49:0b:b4:1f:c0:7a:
37:5a:cb:02:a8:a4:a8:90:d9:cf:01:ef:90:b9:b9:93:91:c0:
48:65:6d:3c:c3:18:4e:08:f1:7d:aa:d7:4f:27:67:71:f5:e0:
c2:20:30:dc:1b:c2:0e:3a:45:90:ab:b5:23:04:ff:6c:4f:1f:
0b:e1:b7:b6
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ0frdVhHn0bihjYn1sz7awvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMzI0MTE0OTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYWI0YTEwMWJmMTRlNGIxMDE5YWU4ZGI1YmE3MTU3M2Q2N2JmMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/T0ZIJBWH7ZPWZuBF6qRN3aCMggY
UaAt/YpujBY+LH/CyasPPwUJpPaeSxp2ZQ2L11R6YVBnPvJYlOJna3KJFIDhe06O
7fjjP9QtjZf8fVKWj67GDeRFHwhs/MXYi1pxpiu6LaC7xfm7nCdNh5YhuAnGa0oq
hQ/ps6TO69beMzJvc+J+9sths0akqGDVMps5Z0WS8TF4SqlRIpAgkYMj5i9AorNm
MYnEqHRxuK/BDLiREt055XhcBo5XIZdp9oqb9bhm1fIOBkdwwf2g1ih/6qe4+skn
kwN5o/GgBgQlDp7SwtdtNFaS1lz5fFf2yQ2f2SwdAM6LiQs9r/GAOqvQqwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBq0oQG/FOSxAZro21unFXPWe/DrMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvR3JTaEFiOFU1TEVCbXVqYlc2Y1ZjOVo3OE9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAURIwAwQA
bXktAwQAbXkvAwQAstsGAwQAsv3lAwQAuS9bAwQAvP/GAwQA1EUIMA0GCSqGSIb3
DQEBCwUAA4IBAQBzBAvnhWCnMZ955HoevXsehI4hQWACnBBokugXHDLEZQMMmVcg
qTfiKmMaWCqA5IraB2otAL+nx2hkBrL0MGpoM3X49F891DUYGwvv5b0HGeWCol0E
WlsxVk2/+Nf/g40MxZMAsJDhJji8sgn/MiHg1teWuwYoQvOzWnX/nL9V6jULapd4
ZDqpxapcFy/whrYWqBz7dPzumizt4sHrZq1F47QDkEudDgqET6iajKOfXdgU5yeE
GNwBjitggeHd4ClJC7QfwHo3WssCqKSokNnPAe+QubmTkcBIZW08wxhOCPF9qtdP
J2dx9eDCIDDcG8IOOkWQq7UjBP9sTx8L4be2
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:35:58 2026 by rpki-client